Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File: P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier: 5kdABUoCbFdf2WRtUrunvR728CdMleGetmN4SO6GdRE=
Subject key identifier: C0:10:3E:71:83:29:16:9A:29:AD:86:4D:7B:DF:72:70:C4:1A:19:48
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial: 01987ED3A695A66E44188FD7853626B58F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number: 0C08
Signing time: Wed 06 Aug 2025 10:00:56 +0000
Manifest this update: Wed 06 Aug 2025 10:00:56 +0000
Manifest next update: Thu 07 Aug 2025 10:00:56 +0000
Files and hashes: 1: G1ZoPreJjIkkyyNJWvhlfTtWo1U.roa (hash: ZGtSGL/7afo62ORK+9uxVq7WnlKM3t68x8dY3Lc6a40=)
2: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: CqnHuypoIIcVSMSD3VSLWged+XAIGTgH9rivN1zf+uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:a6:95:a6:6e:44:18:8f:d7:85:36:26:b5:8f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Validity
Not Before: Aug 6 10:00:56 2025 GMT
Not After : Aug 7 10:00:56 2025 GMT
Subject: CN=c0103e718329169a29ad864d7bdf7270c41a1948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:db:1a:54:79:7b:cd:1b:10:91:ac:05:03:
b8:64:45:55:63:96:25:97:71:5a:40:aa:60:62:70:
67:44:e2:a0:d1:c5:49:5c:1a:2f:5c:16:41:f9:cd:
d5:5f:1b:4a:20:ae:e2:e8:54:da:f9:61:5b:17:c0:
f6:28:02:cd:a8:1a:09:2b:98:b5:66:1c:78:1f:91:
a9:4e:a7:ac:ca:42:86:04:56:f3:0d:d8:d9:7d:83:
b1:0c:78:db:a5:8a:db:3e:4f:7a:b2:c2:79:bc:e5:
2a:88:e4:13:2d:78:c3:15:65:eb:9f:80:94:2e:18:
f4:ac:07:9a:c2:b1:ea:99:61:ea:d2:c8:6f:0f:65:
69:e1:20:0c:3c:67:59:05:76:d2:90:a3:75:68:ac:
3a:7a:b9:6a:c7:39:a5:47:6a:06:2f:43:89:05:9d:
b4:d2:df:5b:36:27:11:8d:20:9b:4c:97:8e:a6:ef:
8a:f4:8c:87:e9:04:7f:05:17:e8:bb:26:98:2e:fb:
0b:19:bc:3f:cb:54:48:92:15:72:06:57:8c:04:b7:
66:82:61:de:de:92:9f:90:57:d9:ac:b4:08:b3:86:
34:9d:b3:b8:0c:74:4b:cc:bc:41:d3:f9:df:e7:60:
23:f1:a9:fe:cd:76:5e:91:80:80:93:9a:db:fd:e9:
25:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:10:3E:71:83:29:16:9A:29:AD:86:4D:7B:DF:72:70:C4:1A:19:48
X509v3 Authority Key Identifier:
keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e8:fc:2f:0e:21:c0:fe:5a:3b:45:2c:ac:9b:6a:51:a9:cb:
0d:21:16:23:da:b7:d9:52:aa:ae:90:a8:a1:b3:51:76:a0:91:
31:de:05:a4:47:53:9b:19:23:4d:27:8b:a2:a2:31:89:15:4b:
ac:55:ea:3b:68:28:75:02:7c:be:7c:69:8d:bd:b2:e8:b7:d8:
57:8e:43:8b:05:8b:97:02:1d:bf:e9:47:db:43:d2:8f:7e:5f:
8e:f0:3e:cf:23:6c:8f:4d:50:95:c2:89:e0:f8:80:2d:46:0b:
eb:ce:8f:f9:8f:c6:bf:33:29:09:22:0b:4c:9e:64:f6:f6:ea:
83:ec:30:eb:09:9d:e4:3b:c1:93:e9:1e:bf:c4:74:a7:7d:65:
49:f3:b5:7a:57:01:11:58:95:0d:1b:cf:4a:bb:ed:ce:7e:d9:
2f:45:bf:6e:bf:94:7d:f0:95:80:bc:3c:bc:f1:eb:52:d9:24:
7d:0b:37:b0:bc:96:cb:92:f1:3f:3e:c6:3f:dc:3f:24:0e:54:
f9:b3:77:e6:35:93:13:65:10:e5:e4:f8:ff:59:e3:9b:4c:4a:
25:63:a1:f0:90:36:89:46:26:9c:f0:2c:67:a2:0e:34:e3:e2:
a0:65:50:1d:7f:21:33:d1:af:37:76:61:4c:64:1c:5a:98:de:
09:64:7d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:39:58 2025 by rpki-client